limit_access inconsistency/issues
    Pavel Kolla 
    pavelkolla at gmail.com
       
    Wed Feb  9 15:37:18 MSK 2011
    
    
  
I am trying to use limit_access to control availability of some locations  via 
certain methods (in my scenario there are places where only POST is allowed by 
app logic). However this is what i encountered:
location /t/
{
	limit_except    GET
	{
		deny all;
	}
}
# curl -I -X GET pkolla:88/t/index.html
HTTP/1.1 200 OK
# curl -I -X POST pkolla:88/t/index.html
HTTP/1.1 403 Forbidden
location /t/
{
	limit_except    POST
	{
		deny all;
	}
}
# curl -I -X GET pkolla:88/t/index.html
HTTP/1.1 403 Forbidden
# curl -I -X POST pkolla:88/t/index.html
HTTP/1.1 405 Not Allowed
IMHO in first case responses should be 200/405 and in second 405/200, even if 
access returns 403 rather than 405 (being related to http_access_module ) it 
still should be consistent and return 200 for POST in second case instead of 
405.
Am i totally missing the concept or there is something else i didn't get?
just in case full config: http://dpaste.com/hold/398339/
    
    
More information about the nginx
mailing list